RSC-Scanner-POC

Next.js RSC Source Code Disclosure Scanner A security scanner for detecting CVE-2025-55183 - Next.js React Server Components RSC source code disclosure vulnerability. Description This scanner detects source code disclosure in Next.js React Server Components RSC. A malicious HTTP request sent to a...

Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

Next.js RSC RCE Scanner Burp Suite Extension A high-fidelity Burp Suite extension to detect the Next.js / React Server Components RSC Remote Code Execution vulnerability CVE-2025-55182 & CVE-2025-66478. This extension implements the detection logic discovered by the Searchlight Cyber Security...

CVE-2025-55183-poc

CVE-2025-55183-poc – Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...

Torito-R2S

Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66478 Detection-first scanner for Next.js RSC targets with optional PoC confirm and exploit/shell modes. Use only on systems you are authorized to test. Requirements Python 3.9+ pip install -r requirements.txt Subfinder binary in PATH for...

CVE-2025-55183_POC

CVE-2025-55183 - Next.js RSC Server Function Source Code Disclosure A source code disclosure vulnerability in Next.js React Server Components RSC. A malicious HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function when the argument is...

React2Shell

🔐 React2Shell - Next.js RSC Pollution RCE Toolkit This Python toolkit exploits Next.js React Server Components RSC prototype pollution + React.lazy-1 gadget chain for full RCE access, including interactive god shell, file upload PHP webshell dropper, and exfiltration via ?out=. Image Preview 🧾...

react2shell-scanner-rust

react2shell-scanner-rust Detect CVE-2025-55182 & CVE-2025-66478 in Next.js/RSC applications. Install cargo build --release Usage ./scanner -u https://example.com ./scanner -l hosts.txt -t 20 -o results.json ./scanner -u https://example.com --crawl --max-depth 3 ./scanner -u https://example.com...

CVE-2025-55182-Terminal

Next.js RSC Vulnerability Scanner CVE-2025-66478 / CVE-2025-55182 A lightweight, multi-threaded Proof of Concept PoC tool designed to detect and demonstrate the Next.js React Server Components RSC Remote Code Execution vulnerability React2Shell. This tool allows for both single-target verificatio...

POC2-CVE-2025-55182

React2Shell Ultimate - CVE-2025-66478 Scanner The most comprehensive scanner for Next.js RSC Remote Code Execution vulnerability ╔════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | || / || | | | | ║ ║ | | / / |/ | | / /\ | ' \ / \ | | ║ ║ | / | | | | / / | | |...